Google Associate Cloud Engineer Exam - Topic 2 Question 129 Discussion

Question

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

Aliza · Accepted Answer

C) Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.

Aliza · Answer

A) Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/devstorage.write_only'.

Aliza · Answer

B) Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/cloud-platform'.

Aliza · Answer

D) Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.